991 matches found
CVE-2023-47360
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...
PT-2023-7038 · Videolan +5 · Vlc +5
Name of the Vulnerable Software and Affected Versions: Videolan VLC versions prior to 3.0.20 Description: The issue is related to an integer underflow in the GetPacket function of the VLC media player, which can lead to an incorrect packet length. This can potentially allow a remote attacker to...
PT-2023-7034 · Videolan +5 · Vlc +5
Name of the Vulnerable Software and Affected Versions: Videolan VLC versions prior to 3.0.20 Description: The issue is related to a Heap-Based Buffer Overflow in the GetPacket function, which can lead to memory corruption. This can be exploited by a remote attacker to damage memory. The estimated...
Ubuntu 16.04 ESM : VideoLAN x265 vulnerability (USN-4809-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4809-1 advisory. It was discovered that VideoLAN x265 mishandled certain memory-allocation inputs. An attacker could use this vulnerability to cause a denial of service crash...
GLSA-202310-05 : dav1d: Denial of Service
The remote host is affected by the vulnerability described in GLSA-202310-05 dav1d: Denial of Service - VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit. CVE-2023-32570 Note that Nessus has not tested for this iss...
Fedora 38 : dav1d (2023-9ea5d6e289)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9ea5d6e289 advisory. Update to version 1.2.1. This version includes a fix for CVE-2023-32570 race condition that can lead to an application crash. Tenable has extracted...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dav1d (SUSE-SU-2023:2618-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2618-1 advisory. - CVE-2023-32570: Fixed possible crash when decoding a frame bsc1211262. Tenable has extracted the...
CVE-2023-31594
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network...
CVE-2023-32570
VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...
CVE-2023-32570
VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...
CVE-2023-32570
VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...
Race condition
VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...
CVE-2023-32570
VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...
CVE-2023-32570
VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...
CVE-2023-32570: Concurrent Execution using Shared Resource with Improper Synchronization
VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...
CVE-2023-32570
VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...
CVE-2023-32570
CVE-2023-32570 affects VideoLAN dav1d before 1.2.0. A race condition in thread_task.c related to dav1d_decode_frame_exit can lead to an application crash. Public advisories show the fix being delivered in 1.2.0+ (Fedora/SUSE advisories note upgrading to 1.2.1 or newer). Affected product: dav1d (A...
